Skip to content

Commit 70542ea

Browse files
Merge pull request #116104 from DCtheGeek/dmc-policy-k8swarnings
Adding K8s style warnings
2 parents 5c9e62a + 13298c1 commit 70542ea

File tree

2 files changed

+10
-4
lines changed

2 files changed

+10
-4
lines changed

articles/governance/policy/concepts/policy-for-kubernetes.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
2-
title: Learn Azure Policy for Kubernetes
3-
description: Learn how Azure Policy uses Rego and Open Policy Agent to manage clusters running Kubernetes in Azure or on-premises.
2+
title: Preview - Learn Azure Policy for Kubernetes
3+
description: Learn how Azure Policy uses Rego and Open Policy Agent to manage clusters running Kubernetes in Azure or on-premises. This is a preview feature.
44
ms.date: 05/20/2020
55
ms.topic: conceptual
66
---
7-
# Understand Azure Policy for Kubernetes clusters
7+
# Understand Azure Policy for Kubernetes clusters (preview)
88

99
Azure Policy extends [Gatekeeper](https://github.com/open-policy-agent/gatekeeper) v3, an _admission
1010
controller webhook_ for [Open Policy Agent](https://www.openpolicyagent.org/) (OPA), to apply
@@ -56,6 +56,12 @@ must enable the **Microsoft.ContainerService** and **Microsoft.PolicyInsights**
5656

5757
1. Register the resource providers and preview features.
5858

59+
> [!CAUTION]
60+
> When you register a feature on a subscription, you can't un-register that feature. After you
61+
> enable some preview features, defaults may be used for all AKS clusters then created in the
62+
> subscription. Don't enable preview features on production subscriptions. Use a separate
63+
> subscription to test preview features and gather feedback.
64+
5965
- Azure portal:
6066

6167
1. Register the **Microsoft.ContainerService** and **Microsoft.PolicyInsights** resource

articles/governance/policy/toc.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@
7777
- name: Design Policy as Code workflows
7878
displayName: devops, infrastructure as code, iac, release, continuous, delivery, deploy
7979
href: ./concepts/policy-as-code.md
80-
- name: Azure Policy for Kubernetes
80+
- name: Azure Policy for Kubernetes (preview)
8181
displayName: aks, engine, k8s, rego, opa, open policy agent, gatekeeper, v3, crd, constraints, arc
8282
href: ./concepts/policy-for-kubernetes.md
8383
- name: Audit VMs with Guest Configuration

0 commit comments

Comments
 (0)